Insulin pump data migration method and system, electronic device, and storage medium

Abstract

Embodiments of the present application provide an insulin pump data migration method and system, an electronic device and a storage medium, belonging to the field of communication technology. The method is applied to an original insulin pump, and the method comprises the following steps: acquiring magnetic field characteristic information of a target insulin pump, and performing magnetic field characteristic verification on the magnetic field characteristic information to obtain magnetic field verification result information; in response to the magnetic field verification result information satisfying a preset magnetic field verification pass condition, performing concatenated encryption on a target device identifier and a check code sent by the target insulin pump according to a first key symbol to obtain an encrypted string body; performing data integrity verification on the encrypted string body to obtain data verification result information; and in response to the data verification result information satisfying a preset integrity verification pass condition, migrating user data to the target insulin pump. The embodiments of the present application can improve the reliability of the safety verification of the insulin pump, and then safely migrate the user data of the old insulin pump to the legal new insulin pump.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to an insulin pump data migration method and system, electronic device and storage medium. Background Technology

[0002] With the rapid development of medical technology, insulin pumps, as miniature devices that can continuously infuse insulin subcutaneously, have been widely used in many fields. For example, in the field of pediatric health management, insulin pumps can be attached subcutaneously to the abdomen of diabetic children, adjusting the infusion rate in real time according to the child's blood sugar fluctuations to reduce the risk of hyperglycemia or hypoglycemia.

[0003] During the use of insulin pumps, replacement may be necessary due to equipment lifespan or malfunction. Since insulin pumps operate based on user data, it's essential to transfer user data from the old pump to the new one. However, during the replacement process, if the new pump's identity cannot be verified, there's a risk that the data could be stolen or tampered with by a counterfeit insulin pump. This could lead to malicious modification of user data, causing excessive or insufficient insulin dosage, posing a serious threat to the user's life. Therefore, to prevent unauthorized access, forgery, or theft of user data from the old insulin pump, it's crucial to perform security verification on the new insulin pump. This ensures the safe migration of user data to a legitimate insulin pump for continued precise treatment. Summary of the Invention

[0004] The main objective of this application is to propose an insulin pump data migration method, system, electronic device, and storage medium, which aims to improve the reliability of insulin pump safety verification and thereby safely migrate user data from old insulin pumps to legitimate new insulin pumps.

[0005] To achieve the above objectives, a first aspect of this application proposes an insulin pump data migration method applied to a primary insulin pump that stores user data. The method includes:

[0006] The magnetic field characteristic information of the target insulin pump is obtained, and the magnetic field characteristics of the magnetic field characteristic information are verified to obtain magnetic field verification result information; wherein, the target insulin pump is equipped with a target identification magnet, and the magnetic field characteristic information is used to reflect the magnetic field characteristics of the target identification magnet;

[0007] In response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, the system receives the target device identifier and verification code sent from the target insulin pump; wherein the verification code is generated by the target insulin pump.

[0008] The target device identifier and the checksum are concatenated and encrypted using the first key to obtain an encrypted string; wherein the first key is pre-stored in the original insulin pump and the target insulin pump.

[0009] The encrypted string is subjected to data integrity verification to obtain data verification result information;

[0010] In response to the data verification result information meeting the preset integrity verification pass conditions, the user data is migrated to the target insulin pump.

[0011] In some embodiments, migrating the user data to the target insulin pump in response to the data verification result information satisfying a preset integrity verification pass condition includes:

[0012] In response to the data verification result information satisfying the preset integrity verification pass condition, the user data is migrated to the target insulin pump, a first key calculation parameter is determined according to a first random number and a first key symbol, and the first key calculation parameter is sent to the target insulin pump; wherein, the first random number is generated by the original insulin pump;

[0013] The second key calculation parameter is received from the target insulin pump; wherein the second key calculation parameter is determined by the target insulin pump based on the first key symbol and the second random number, and the second random number is generated by the target insulin pump.

[0014] In the original insulin pump, a second key symbol is generated based on the first key calculation parameters and the second key calculation parameters; wherein, in the target insulin pump, the second key symbol is also generated based on the first key calculation parameters and the second key calculation parameters;

[0015] The user data is encrypted using the first key and the second key to obtain encrypted user data. The encrypted user data is then transferred to the target insulin pump, so that the target insulin pump can decrypt the encrypted user data using the first key and the second key to obtain the user data.

[0016] In some embodiments, the user data includes health-related data and health-unrelated data, and the step of encrypting the user data according to the first key and the second key to obtain encrypted user data includes:

[0017] In the original insulin pump, the health-related data is encrypted according to the second key to obtain encrypted health-related data;

[0018] The encrypted health-related data and the health-unrelated data are encrypted using the first key symbol to obtain the encrypted user data.

[0019] In some embodiments, generating a second key symbol based on the first key calculation parameters and the second key calculation parameters in the original insulin pump includes:

[0020] The first key calculation parameter and the second key calculation parameter are XORed to obtain the target key calculation parameter.

[0021] The target key generation algorithm is determined from a preset set of key generation algorithms based on the target key calculation parameters; wherein, the set of key generation algorithms includes multiple preset key generation algorithms;

[0022] The target key calculation parameters are calculated according to the target key generation algorithm to generate the second key symbol.

[0023] To achieve the above objectives, a second aspect of this application proposes another insulin pump data migration method, applied to a target insulin pump, the target insulin pump being equipped with a target identification magnet, the method comprising:

[0024] Generate a verification code;

[0025] The pre-configured target device identifier and the verification code are sent to the original insulin pump, so that the original insulin pump performs concatenated encryption of the target device identifier and the verification code according to the first key to obtain an encrypted string, and performs data integrity verification on the encrypted string to obtain data verification result information; wherein, the first key is pre-stored in the original insulin pump and the target insulin pump;

[0026] In response to the data verification result information meeting the preset integrity verification pass conditions, user data migrated from the original insulin pump is received. The user data is stored within the original insulin pump.

[0027] In some embodiments, prior to generating the checksum, the method further includes:

[0028] Obtain the magnetic field feature information corresponding to the target identification magnet, and the magnetic field feature information is used to reflect the magnetic field characteristics of the target identification magnet;

[0029] The magnetic field characteristic information is verified to obtain magnetic field verification result information.

[0030] In response to the magnetic field verification result information satisfying the preset magnetic field verification pass conditions, the verification code is generated.

[0031] To achieve the above objectives, a third aspect of this application provides an insulin pump data migration system, the system comprising:

[0032] The target insulin pump includes: a target identification magnet;

[0033] A primary insulin pump, communicatively connected to a target insulin pump, includes: a first magnetic field sensor and a first control unit; wherein the first magnetic field sensor is used to acquire magnetic field characteristic information corresponding to the target identifier magnet; the first control unit is electrically connected to the first magnetic field sensor, and is used to determine magnetic field verification result information according to the insulin pump data migration method described in the first aspect and the magnetic field characteristic information; the first control unit is further used to, in response to the magnetic field verification result information meeting a preset magnetic field verification pass condition, acquire the target device identifier and verification code of the target insulin pump, and is used to determine data verification result information according to the insulin pump data migration method described in the first aspect, the target device identifier and the verification code; the first control unit is further used to, in response to the data verification result information meeting a preset integrity verification pass condition, migrate user data to the target insulin pump.

[0034] In some embodiments, the primary insulin pump further includes a first indicator light; the target insulin pump further includes a second indicator light and a second control unit, the second control unit being communicatively connected to the second indicator light.

[0035] The first control unit is communicatively connected to the second control unit and the first indicator light. The first control unit is also used to control the light emission color of the first indicator light to a first preset color in response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, and to send a first synchronization command to the second control unit so that the second control unit controls the light emission color of the second indicator light to also be the first preset color.

[0036] The first control unit is further configured to, in response to the data verification result information satisfying the preset integrity verification pass condition, control the light emission color of the first indicator light to a second preset color, and send a second synchronization command to the second control unit so that the second control unit controls the light emission color of the second indicator light to also be the second preset color.

[0037] To achieve the above objectives, a fourth aspect of the present application provides an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the insulin pump data migration method described in the first and second aspects.

[0038] To achieve the above objectives, a fifth aspect of the present application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the insulin pump data migration method described in the first and second aspects.

[0039] The insulin pump data migration method, system, electronic device, and storage medium proposed in this application acquire the magnetic field characteristic information corresponding to the target identifier magnet configured on the target insulin pump, and verify the magnetic field characteristics to obtain magnetic field verification result information. If the magnetic field verification result information meets the preset magnetic field verification pass conditions, the target device identifier and check code sent by the target insulin pump are concatenated and encrypted to obtain an encrypted string, and the encrypted string is verified for data integrity to obtain data verification result information. If the data verification result information meets the preset integrity verification pass conditions, the user data is migrated to the target insulin pump. In this way, the security of the new insulin pump can be verified by the old insulin pump at both the hardware and software levels, reducing the risk of counterfeit insulin pump access and tampering with user data. That is, this application can improve the reliability of insulin pump security verification, thereby securely migrating user data from the old insulin pump to the legitimate new insulin pump. Attached Figure Description

[0040] Figure 1 This is a flowchart of an insulin pump data migration method provided in an embodiment of this application;

[0041] Figure 2 yes Figure 1 The flowchart of step S102 in the document;

[0042] Figure 3 yes Figure 2 The flowchart of step S204 in the process;

[0043] Figure 4 yes Figure 2 The flowchart of step S203 in the process;

[0044] Figure 5 This is another flowchart of the insulin pump data migration method provided in the embodiments of this application;

[0045] Figure 6 yes Figure 5 A flowchart of the step preceding step S501;

[0046] Figure 7 This is a schematic diagram of the structure of the insulin pump data migration system provided in the embodiments of this application;

[0047] Figure 8 This is a schematic diagram of the hardware structure of the electronic device provided in the embodiments of this application.

[0048] Figure label:

[0049] The target insulin pump 710, the target marking magnet 711, the second control unit 712, the original insulin pump 720, the first magnetic field sensor 721, and the first control unit 722. Detailed Implementation

[0050] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0051] It should be noted that although functional modules are divided in the device schematic diagram and a logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first," "second," etc., in the specification, claims, and the aforementioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.

[0053] First, let's analyze some of the terms used in this application:

[0054] Insulin pump: refers to a portable, miniature pump-type therapeutic device that continuously infuses insulin subcutaneously at a set rate.

[0055] Data migration refers to the data transfer operation from an existing device to a new device. For example, safely transferring user data from an old insulin pump to a new insulin pump.

[0056] The widespread application of insulin pump data migration methods provides users with a convenient means of synchronizing treatment parameters when replacing their pumps. However, existing insulin pump data migration methods still have limitations. For example, existing technologies typically use asymmetric encryption algorithms (such as elliptic curve cryptography) to encrypt the user data to be transmitted before migrating the encrypted data to the new pump. However, this method only ensures the confidentiality of the data transmission channel and lacks secure verification of the target pump's identity. User data can still be received by a counterfeit pump and cracked offline. Alternatively, existing technologies also use near-field communication to migrate user data to the new pump and use the device serial number as the sole credential to verify the new pump's security. However, this method cannot verify whether the new pump's hardware has been modified, and the device serial number, as static information, can be stolen, reducing the reliability of secure verification of the insulin pump. Based on this, embodiments of this application provide an insulin pump data migration method and system, electronic device, and storage medium, aiming to improve the reliability of secure verification of insulin pumps, thereby securely migrating user data from the old insulin pump to a legitimate new insulin pump.

[0057] The insulin pump data migration method provided in this application relates to the field of communication technology. This method can be applied to a terminal, a server, or software running on either a terminal or a server. In some embodiments, the terminal can be a smartphone, tablet, laptop, desktop computer, etc.; the server can be configured as an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application implementing the insulin pump data migration method, but is not limited to the above forms.

[0058] This application can be used in a wide variety of general-purpose or special-purpose computer system environments or configurations. Examples include: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, and distributed computing environments including any of the above systems or devices. This application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform specific tasks or implement specific abstract data types. This application can also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0059] It should be noted that in all specific embodiments of this application, when processing data related to user identity or characteristics, such as user information and user historical data, user permission or consent is obtained first. Furthermore, the collection, use, and processing of this data comply with relevant laws, regulations, and standards. In addition, when embodiments of this application require access to sensitive personal information of users, separate permission or consent from the user is obtained through pop-ups or redirects to confirmation pages. Only after obtaining the user's separate permission or consent is the necessary user-related data required for the proper functioning of these embodiments acquired.

[0060] Figure 1 This is an optional flowchart of the insulin pump data migration method provided in the embodiments of this application. Figure 1 The method described above is applied to a primary insulin pump that stores user data. This method may include, but is not limited to, steps S101 to S105:

[0061] Step S101: Obtain the magnetic field characteristic information of the target insulin pump, and verify the magnetic field characteristics of the magnetic field characteristic information to obtain the magnetic field verification result information.

[0062] Step S102: In response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, receive the target device identifier and verification code sent from the target insulin pump.

[0063] Step S103: Concatenate encryption of the target device identifier and the verification code according to the first key to obtain the encrypted string;

[0064] Step S104: Perform data integrity verification on the encrypted string and obtain data verification result information;

[0065] In step S105, in response to the data verification result information meeting the preset integrity verification pass conditions, the user data is migrated to the target insulin pump.

[0066] In the embodiments of this application, steps S101 to S105 involve obtaining the magnetic field characteristic information corresponding to the target identifier magnet configured on the target insulin pump, verifying the magnetic field characteristics of the magnetic field characteristic information, and obtaining magnetic field verification result information. If the magnetic field verification result information meets the preset magnetic field verification pass conditions, the target device identifier and check code sent by the target insulin pump are concatenated and encrypted to obtain an encrypted string, and the encrypted string is subjected to data integrity verification to obtain data verification result information. If the data verification result information meets the preset integrity verification pass conditions, the user data is migrated to the target insulin pump. In this way, the security of the new insulin pump can be verified by the old insulin pump at both the hardware and software levels, reducing the risk of counterfeit insulin pumps accessing and tampering with user data. That is, this application can improve the reliability of security verification of insulin pumps, thereby securely migrating user data from the old insulin pump to the legitimate new insulin pump.

[0067] In step S101 of some embodiments, the original insulin pump may refer to an old pump storing user data. The user data may refer to a collection of information including user identification and user treatment parameters. The target insulin pump may refer to a new pump that receives user data and replaces the original insulin pump. The target insulin pump is equipped with a target identification magnet. The target identification magnet may refer to a permanent magnet disposed in the target insulin pump. For example, the target identification magnet may be a cylindrical neodymium iron boron magnet or a rectangular ferrite magnet, without specific limitations. Magnetic field characteristic information may refer to the magnetic field characteristics corresponding to the target identification magnet. For example, the magnetic field characteristic information may be the magnetic field strength and magnetic field direction corresponding to the target identification magnet. Magnetic field characteristic verification may refer to the process of comparing and analyzing the magnetic field characteristic information according to preset magnetic field verification pass conditions. Magnetic field verification result information may refer to the verification information obtained after verifying the magnetic field characteristic information, used to indicate whether the magnetic field characteristics meet the preset magnetic field verification pass conditions. For example, in this embodiment, preset magnetic field verification pass conditions can be pre-selected and stored in the cloud. The original insulin pump then sends the magnetic field characteristic information to the cloud, and the cloud compares the magnetic field characteristic information with the preset magnetic field verification pass conditions to determine the magnetic field verification result. Alternatively, in this embodiment, preset magnetic field verification pass conditions can be stored within the original insulin pump, which then compares the magnetic field characteristic information with these conditions to determine the magnetic field verification result. It is understood that the method used in this embodiment to verify the magnetic field characteristics can be adjusted according to actual needs.

[0068] It should be noted that the magnetic field verification result may or may not meet the preset magnetic field verification pass conditions. The preset magnetic field verification pass conditions can refer to a pre-defined range of magnetic field characteristic thresholds used to determine the legitimacy of the target insulin pump. For example, the preset magnetic field verification pass conditions could be a magnetic field strength between 42 and 48 millitrs, and an angle of 10 to 15 degrees between the magnetic field direction and the pump's long axis. If the magnetic field characteristic information indicates a magnetic field strength of 46 millitrs and an angle of 10 degrees with the pump's long axis, then the magnetic field verification result meets the preset magnetic field verification pass conditions; or, if the magnetic field characteristic information indicates a magnetic field strength of 42 millitrs and an angle of 9 degrees with the pump's long axis, then the magnetic field verification result does not meet the preset magnetic field verification pass conditions. It can be understood that the preset magnetic field verification pass conditions can be determined based on the magnetic field characteristics corresponding to the target insulin pump's identification magnet at the time of manufacture. Thus, when the target insulin pump is modified, such as when the casing is opened causing the target identification magnet to shift, the magnetic field characteristic information acquired by the original insulin pump is the magnetic field characteristic corresponding to the target identification magnet after the position change. This magnetic field characteristic information will deviate from the preset magnetic field verification conditions, thus failing the magnetic field characteristic verification. Therefore, the safety of the target insulin pump can be judged from a physical perspective.

[0069] In step S102 of some embodiments, if the magnetic field verification result information meets the preset magnetic field verification pass conditions, it indicates that the target insulin pump is physically secure, and the original insulin pump can receive the target device identifier and verification code sent from the target insulin pump. The target device identifier can refer to a string used to identify the target insulin pump. For example, the target device identifier can be "001S2304" or "A001", with no specific limitation. The verification code can refer to a verification code generated by the target insulin pump to verify its security. For example, the verification code can be a random number, such as "482739"; or, the verification code can be a combination of the target insulin pump's manufacturing date, network card hardware address, and operation password. For example, assuming the manufacturing date is XXXX year XX month XX day, the network card hardware address is 00E04C56, and the operation password is "9876", then the verification code could be "XXXXXXXX00E04C569876". It is understood that the method of generating the verification code can be adjusted according to actual needs.

[0070] It should be noted that if the magnetic field verification results do not meet the preset magnetic field verification pass conditions, it means that the target insulin pump is not safe at the physical level. The current insulin pump data migration process needs to be stopped and subsequent steps should not be carried out. At this time, the target insulin pump can be replaced or the safety of the target insulin pump can be verified manually before continuing the insulin pump data migration.

[0071] In step S103 of some embodiments, concatenated encryption can refer to the process of concatenating the target device identifier and the checksum together, and encrypting the concatenated whole according to the first key. The encrypted string can refer to the encrypted data obtained after concatenating encryption of the target device identifier and the checksum according to the first key. The first key can refer to a key pre-stored in the original insulin pump and the target insulin pump. For example, the first key can be "ABCefg12345" or "Key_123459", and is not specifically limited.

[0072] In steps S104 to S105 of some embodiments, data integrity verification can refer to the process of performing integrity comparison analysis on the encrypted string. Data verification result information can refer to verification information obtained after performing data integrity verification on the encrypted string, indicating whether the encrypted string is complete. For example, in embodiments of this application, when the original insulin pump receives the target device identifier and checksum sent from the target insulin pump, it can concatenate and encrypt the target device identifier and checksum using a first key stored in the target insulin pump to obtain an encrypted string. The target insulin pump then sends the generated encrypted string to the cloud, and the original insulin pump also sends its generated encrypted string to the cloud. The cloud then performs an integrity comparison analysis on the encrypted string generated by the target insulin pump against the encrypted string generated by the original insulin pump to determine the data verification result information. The data verification result information can indicate that the encrypted string generated by the target insulin pump is completely identical to the encrypted string generated by the original insulin pump.

[0073] It should be noted that if the data verification results meet the preset integrity verification pass conditions, it indicates that the target insulin pump is secure at the software level, and user data can be migrated to the target insulin pump. If the data verification results do not meet the preset integrity verification pass conditions, it indicates that the target insulin pump is insecure at the software level, and the current insulin pump data migration process needs to be stopped. In this case, a new checksum can be generated and the data integrity verification can be performed again; alternatively, the security of the device at the software level can be manually verified, and then the insulin pump data migration can continue.

[0074] Please see Figure 2In some embodiments, step S102 may include, but is not limited to, steps S201 to S204:

[0075] Step S201: In response to the encrypted string information satisfying the preset integrity verification pass condition, the first key calculation parameters are determined according to the first random number and the first key symbol, and the first key calculation parameters are sent to the target insulin pump;

[0076] Step S202: Receive the second key calculation parameters from the target insulin pump;

[0077] Step S203: In the original insulin pump, a second key symbol is generated based on the first key calculation parameters and the second key calculation parameters;

[0078] Step S204: Encrypt the user data according to the first key and the second key to obtain encrypted user data, and transfer the encrypted user data to the target insulin pump so that the target insulin pump can decrypt the encrypted user data according to the first key and the second key to obtain the user data.

[0079] In step S201 of some embodiments, if the magnetic field verification result information meets the preset magnetic field verification pass conditions, the original insulin pump determines the first key calculation parameter based on the first random number and the first key symbol, and sends the first key calculation parameter to the target insulin pump. The first random number can refer to a random number generated by the original insulin pump. For example, the first random number can be "482917" or "739248", and is not specifically limited. The first key calculation parameter can refer to the intermediate value obtained by combining the first random number and the first key symbol according to a preset algorithm, used for subsequently generating the second key symbol. For example, if the first key symbol is "Key_123459" and the first random number is "482917", the first key calculation parameter can be the first thirteen digits of the concatenation of the first random number and the first key symbol, "Key_123459482". It is understood that the generation method of the first key calculation parameter can be adjusted according to actual needs.

[0080] In step S202 of some embodiments, the second key calculation parameter may refer to an intermediate value obtained by the target insulin pump based on a first key symbol and a second random number according to a preset algorithm, used for the subsequent generation of the second key symbol. The second random number may refer to a random number generated by the target insulin pump. For example, if the first key symbol is "Key_123459" and the second random number is "628415", the second key calculation parameter may be "628415Key_123459", which is the concatenation of the second random number and the first key symbol. It is understood that the generation method of the second key calculation parameter can be adjusted according to actual needs, and the generation method of the second key calculation parameter may be the same as or different from the generation method of the first key calculation parameter.

[0081] In step S203 of some embodiments, the second key symbol may refer to a session key generated in the original insulin pump based on the first key calculation parameters and the second key calculation parameters according to a preset key generation algorithm. For example, the second key symbol can be generated by concatenating the first key calculation parameters and the second key calculation parameters, and then generating it based on the concatenated parameters according to a Key Derivation Function (KDF) algorithm; or, the second key symbol can be directly generated according to a Hash-based Key Derivation Function (HKDF) algorithm, using the first key calculation parameters as input key material and the second key calculation parameters as salt. It is understood that the generation method of the second key symbol can be adjusted according to actual needs. It should be noted that in the embodiments of this application, the second key symbol needs to be generated in the target insulin pump in the same way, based on the first key calculation parameters and the second key calculation parameters sent by the original insulin pump.

[0082] In step S204 of some embodiments, data encryption can refer to a process of double-encrypting user data based on a first key and a second key according to a preset encryption algorithm. Encrypted user data can refer to the ciphertext data obtained after encrypting user data using the first and second key. For example, in embodiments of this application, user data can first be encrypted using the Advanced Encryption Standard (AES) algorithm based on the first key, and then encrypted again using the AES algorithm based on the second key to finally obtain encrypted user data; alternatively, embodiments of this application can also first encrypt user data using the Shangmi 4 Block Cipher Algorithm (SM4) algorithm based on the second key, and then encrypted again using the SM4 algorithm based on the first key to finally obtain encrypted user data. It is understood that the method of generating encrypted user data can be adjusted according to actual needs. The original insulin pump then migrates the encrypted user data to the target insulin pump. Upon receiving the encrypted user data, the target insulin pump can decrypt the encrypted user data using the second key previously generated locally and the stored first key to obtain the user data.

[0083] It is understood that, in this embodiment of the application, a first key calculation parameter determined based on a first random number and a first key symbol is sent to the target insulin pump, and a second key calculation parameter determined by the first key symbol and a second random number is received from the target insulin pump. Then, a second key symbol is generated in both the target and original insulin pumps based on the first and second key calculation parameters, respectively. Next, user data is encrypted using the first and second key symbols to obtain encrypted user data. Finally, the encrypted user data is migrated to the target insulin pump, allowing the target insulin pump to decrypt the encrypted user data using the first and second key symbols to obtain the user data. In this way, the user data to be migrated can be double-encrypted using a real-time generated key and a pre-selected stored key. The target insulin pump must also decrypt the data using a key generated in the same manner and a pre-selected stored key to obtain the user data, reducing the risk of user data leakage and thus improving the security of insulin pump data migration.

[0084] Please see Figure 3 In some embodiments, user data includes health-related data and health-unrelated data. In step S204, the user data is encrypted according to the first key and the second key to obtain encrypted user data, which may include, but is not limited to, steps S301 to S302:

[0085] Step S301: In the original insulin pump, the health association data is encrypted according to the second key to obtain encrypted health association data;

[0086] Step S302: Encrypt the encrypted health-related data and health-unrelated data according to the first key symbol to obtain encrypted user data.

[0087] In steps S301 to S302 of some embodiments, health-related data can refer to data in user data related to the user's treatment plan. For example, health-related data can be basal rate plans, insulin sensitivity coefficients, blood glucose history records, or alarm threshold settings. Health-irrelevant data can refer to data in user data related to device operation or user preferences but not directly related to treatment decisions. For example, health-irrelevant data can be pump serial numbers, screen brightness, language settings, or button volume. Encrypted health-related data can refer to ciphertext data obtained by encrypting health-related data using a preset encryption algorithm based on a second key. Encrypted user data can refer to ciphertext data obtained by encrypting both encrypted health-related data and health-irrelevant data using a preset encryption algorithm based on a first key. For example, in embodiments of this application, health-related data can be encrypted using the AES algorithm based on a second key to obtain encrypted health-related data. Then, the encrypted health-related data and health-irrelevant data are combined, and the combined data is encrypted using the AES algorithm based on the first key to finally obtain encrypted user data.

[0088] It is understood that this application embodiment divides user data into health-related data and health-unrelated data. The health-related data is encrypted using a second key to obtain encrypted health-related data. Then, the combination of the encrypted health-related data and health-unrelated data is encrypted using a first key to obtain encrypted user data. In this way, only important data can be double-encrypted, reducing the time spent encrypting the original insulin pump data and the time spent decrypting the target insulin pump data, thereby improving the efficiency of insulin pump data migration.

[0089] Please see Figure 4 In some embodiments, step S203 may include, but is not limited to, steps S401 to S403:

[0090] Step S401: Perform an XOR operation on the first key calculation parameters and the second key calculation parameters to obtain the target key calculation parameters;

[0091] Step S402: Determine the target key generation algorithm from the preset key generation algorithm set according to the target key calculation parameters; wherein, the key generation algorithm set includes multiple preset key generation algorithms;

[0092] Step S403: Generate a second key symbol by calculating the target key parameters according to the target key generation algorithm.

[0093] In step S401 of some embodiments, the XOR operation can refer to the process of performing a bitwise XOR operation between the first key calculation parameter and the second key calculation parameter. The target key calculation parameter can refer to the intermediate value obtained after performing the XOR operation on the first key calculation parameter and the second key calculation parameter, which is used to calculate the second key. For example, if the first key calculation parameter is "ABCdef1234567890" and the second key calculation parameter is "FEDcba0987654321", then the target key calculation parameter can be the result of a 32-bit byte XOR operation, "5655555555555555"; or, if the first key calculation parameter is "1234abcd" and the second key calculation parameter is "5678ef01", then the target key calculation parameter can be the result of a bitwise XOR operation, "444c4c4c", that is, a bitwise XOR operation on each corresponding bit. It is understood that the method of generating the target key calculation parameter can be adjusted according to actual needs.

[0094] In steps S402 to S403 of some embodiments, the target key generation algorithm can refer to an algorithm determined from a set of preset key generation algorithms included in the key generation algorithm set based on the target key calculation parameters, used to calculate the second key symbol. For example, if the target key calculation parameters are "56555555555555555", then the last digit "5" of the target key calculation parameters can be taken, and the fifth preset key generation algorithm can be selected sequentially from the key generation algorithm set as the target key generation algorithm; or, if the target key calculation parameters are "444c4c4c", then the number of bits in the target key calculation parameters can be taken, i.e., "8", and the eighth preset key generation algorithm can be selected sequentially from the key generation algorithm set as the target key generation algorithm. It is understood that the selection method of the target key generation algorithm can be adjusted according to actual needs. The second key symbol can refer to a session key obtained after key generation based on the target key calculation parameters according to the target key generation algorithm.

[0095] It is understood that, in this embodiment of the application, the target key calculation parameter is obtained by XORing the first key calculation parameter and the second key calculation parameter. Then, a target key generation algorithm is determined from a preset set of key generation algorithms based on the target key calculation parameter. Finally, the target key generation algorithm is used to generate a key based on the target key calculation parameter to obtain the second key symbol. In this way, the key generation algorithm can be dynamically selected based on the real-time XOR processing result, reducing the risk of the second key symbol being predicted or leaked during data encryption or decryption, reducing the possibility of user data leakage, and thus improving the security of insulin pump data migration.

[0096] Figure 5 This is another optional flowchart of the insulin pump data migration method provided in the embodiments of this application. Figure 5The method described above is applied to a target insulin pump equipped with a target identification magnet. This method may include, but is not limited to, steps S501 to S503.

[0097] Step S501: Generate a verification code;

[0098] Step S502: The pre-configured target device identifier and verification code are sent to the original insulin pump so that the original insulin pump performs concatenated encryption of the target device identifier and verification code according to the first key to obtain an encrypted string, and performs data integrity verification on the encrypted string to obtain data verification result information.

[0099] Step S503: In response to the data verification result information meeting the preset integrity verification pass condition, the user data migrated from the original insulin pump is received.

[0100] In steps S501 to S503 of some embodiments, firstly, provided that the magnetic field verification result information has met the preset magnetic field verification pass conditions, the target insulin pump generates a verification code. The verification code can refer to a verification code generated by the target insulin pump used to verify the security of the target insulin pump. Then, the target insulin pump sends the generated verification code and a pre-configured target device identifier to the original insulin pump, so that the original insulin pump concatenates and encrypts the target device identifier and verification code according to a first key, obtaining an encrypted string, and performs data integrity verification on the encrypted string to obtain data verification result information. If the data verification result information corresponding to the original insulin pump meets the preset integrity verification pass conditions, the target insulin pump can receive user data migrated from the original insulin pump. If the data verification result information corresponding to the original insulin pump does not meet the preset integrity verification pass conditions, it indicates that the identity of the target insulin pump is questionable, and the current insulin pump data migration process needs to be terminated.

[0101] Understandably, in this embodiment, assuming the original insulin pump verifies that the target insulin pump has not been modified, the target insulin pump sends a generated checksum and a pre-configured target device identifier to the original insulin pump. This allows the original insulin pump to verify the integrity of the encrypted string obtained by concatenating and encrypting the target device identifier and checksum using a first key. If the encrypted string generated by the original insulin pump is complete, the target insulin pump can receive user data migrated from the original insulin pump. This ensures that the target insulin pump undergoes software-level verification even after magnetic field verification, reducing the possibility of counterfeit or tampered pumps accessing and receiving user data. In other words, this application improves the reliability of security verification for new insulin pumps, thereby enabling the secure migration of user data to legitimate new insulin pumps.

[0102] In some embodiments, prior to step S501, the insulin pump data migration method may also include, but is not limited to, steps S601 to S603:

[0103] Step S601: Obtain the magnetic field feature information corresponding to the target identification magnet. The magnetic field feature information is used to reflect the magnetic field characteristics of the target identification magnet.

[0104] Step S602: Verify the magnetic field characteristics of the magnetic field feature information to obtain the magnetic field verification result information;

[0105] Step S603: In response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, a verification code is generated.

[0106] In steps S601 to S603 of some embodiments, the target insulin pump can acquire magnetic field feature information corresponding to the target identification magnet. This magnetic field feature information reflects the magnetic field characteristics of the target identification magnet. Then, the magnetic field feature information is verified, for example, by comparing the magnetic field features stored in the cloud at the time of the target insulin pump's manufacture with the currently acquired magnetic field feature information. Only after the magnetic field verification result meets preset magnetic field verification pass conditions is a verification code generated. In this way, the target insulin pump can perform a self-test using its factory magnetic field features: verification is only generated if it passes, otherwise the process is immediately terminated, avoiding subsequent encryption and communication overhead, thereby improving the efficiency of insulin pump data migration.

[0107] Please see Figure 7 This application also provides an insulin pump data migration system, which includes a target insulin pump 710 and a source insulin pump 720.

[0108] The target insulin pump 710 includes: a target marking magnet 711;

[0109] The primary insulin pump 720 is communicatively connected to the target insulin pump 710. The primary insulin pump 720 includes a first magnetic field sensor 721 and a first control unit 722. The first magnetic field sensor 721 acquires magnetic field characteristic information corresponding to the target identifier magnet 711. The first control unit 722 is electrically connected to the first magnetic field sensor 721 and is used to determine magnetic field verification result information based on the aforementioned insulin pump data migration method and magnetic field characteristic information. The first control unit 722 is also used to acquire the target device identifier and verification code of the target insulin pump 710 in response to the magnetic field verification result information meeting preset magnetic field verification pass conditions, and to determine data verification result information based on the aforementioned insulin pump data migration method, target device identifier, and verification code. The first control unit 722 is also used to migrate user data to the target insulin pump 710 in response to the data verification result information meeting preset integrity verification pass conditions.

[0110] In this embodiment, a target identification magnet is provided inside the target insulin pump 710. The original insulin pump 720 is communicatively connected to the target insulin pump 710. For example, the original insulin pump 720 and the target insulin pump 710 can be connected via near-field communication, that is, a near-field communication chip can be provided in each of the two pumps to realize information transmission. The first magnetic field sensor 721 can refer to a magnetically sensitive element capable of sensing the magnetic field strength and direction of the target identification magnet. For example, the first magnetic field sensor 721 can be a triaxial Hall sensor or an anisotropic magnetoresistive sensor, and is not specifically limited. The first control unit 722 can refer to a controller used to execute the insulin pump data migration method. For example, the first control unit 722 can be a microcontroller or a security chip, and is not specifically limited.

[0111] It is understood that the insulin pump data migration system constructed in this application, which includes a target insulin pump and an original insulin pump, acquires the magnetic field characteristic information corresponding to the target identifier magnet through a first magnetic field sensor. Then, it executes the above-mentioned insulin pump data migration method through a first control unit and the magnetic field characteristic information to obtain magnetic field verification result information and data verification result information. If the magnetic field verification result information meets the preset magnetic field verification pass condition and the data verification result information meets the preset integrity verification pass condition, then the user data is migrated to the target insulin pump. In this way, user data from the old pump can be securely migrated to the new pump, reducing the risk of counterfeit pump access and tampering, and improving the security and reliability of data migration.

[0112] In some embodiments, the primary insulin pump 720 further includes a first indicator light; the target insulin pump 710 further includes a second indicator light and a second control unit 712, the second control unit 712 being communicatively connected to the second indicator light.

[0113] The first control unit 722 is communicatively connected to the second control unit 712 and the first indicator light. The first control unit 722 is also used to control the light emission color of the first indicator light to the first preset color in response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, and to send a first synchronization command to the second control unit 712 so that the second control unit 712 controls the light emission color of the second indicator light to the same first preset color.

[0114] The first control unit 722 is also used to control the light color of the first indicator light to a second preset color in response to the data verification result information meeting the preset integrity verification pass condition, and to send a second synchronization command to the second control unit 712 so that the second control unit 712 controls the light color of the second indicator light to also be the second preset color.

[0115] In this embodiment, the first indicator light may refer to the indicator light within the original insulin pump 720 used to display the migration process status. The second indicator light may refer to the indicator light within the target insulin pump 710 used to display the migration process status. For example, both the first and second indicator lights can be LED lights or OLED lights, and there is no specific limitation. The first preset color may refer to a pre-selected color used to indicate that the magnetic field verification has passed and migration can continue. The second preset color may refer to a pre-selected color used to indicate that the data integrity verification has passed and migration is about to be completed. For example, the first preset color may be green, and the second preset color may be blue. It is understood that the first preset color and the second preset verification can be adjusted according to actual needs, but the colors must be different.

[0116] It should be noted that, in this embodiment of the application, the first indicator light and the second indicator light can be controlled to display a solid white light when the user data migration is completed, and to display a red flashing light when the migration is terminated; different colors, flashing frequencies or display times can also be used to further distinguish the states such as "verification in progress", "transmission in progress", "transmission completed" and "transmission failed". The specific colors and flashing frequencies can be set according to actual needs.

[0117] It is understood that, in this embodiment of the application, indicator lights are respectively set in the original insulin pump and the target insulin pump, and the two indicator lights are controlled by the first control unit to display the same color. This allows for a clear display of the insulin pump data migration process, reducing the time-consuming problem caused by the inability to detect verification failures in a timely manner, and improving the efficiency of insulin pump data migration and the user experience.

[0118] It should be noted that, in this embodiment of the application, prompt sound modules can also be set in the original insulin pump and the target insulin pump respectively. Similarly, the first control unit controls the two prompt sound modules to emit different tones or rhythms for different verification stages or abnormal states. For example, a short "beep" is emitted when the magnetic field verification is successful, two "beeps" are emitted when the data integrity verification is successful, and a continuous long "beep" is emitted when the migration fails. This allows the user to quickly grasp the migration status through sound without having to observe the indicator lights or screen, further improving the ease of operation.

[0119] In some embodiments, the primary insulin pump 720 further includes a protruding key; the target insulin pump 710 further includes a recess. A protruding key may refer to a positioning protrusion disposed on the edge of the primary insulin pump housing, and a recess may refer to a corresponding positioning notch disposed on the edge of the target insulin pump housing. It is understood that the size and position of the protruding key and the recess can be adjusted according to actual needs. When the primary insulin pump 720 and the target insulin pump 710 need to be paired, the protruding key is inserted into the recess, so that the housings of the two are completely fitted together and the target identification magnet is precisely aligned with the first magnetic field sensor, ensuring accurate reading of the magnetic field feature information, thereby improving the reliability of subsequent verification of the magnetic field feature information.

[0120] In some embodiments, the original insulin pump 720 also includes a button. The button can refer to a switch used to start or cancel insulin pump data migration. For example, the button can be a capacitive button or a Hall effect touch button, and the specific type is not limited. It should be noted that the first magnetic field sensor 721 can also continuously acquire the magnetic field strength corresponding to the target identifier magnet and send it to the first control unit 722. After receiving the data, the first control unit 722 can compare it according to a preset magnetic field strength threshold. When the magnetic field strength acquired by the first magnetic field sensor 721 is greater than the magnetic field strength threshold, the first control unit 722 sends a control signal to the button, causing the button to be pressed, thereby triggering the entire insulin data migration process. This ensures that subsequent steps are only initiated after the magnetic field feature information has been accurately read and verified, improving the accuracy of data migration.

[0121] In some embodiments, the original insulin pump 720 includes a main memory and a backup memory. The main memory relies on the built-in power supply of the original insulin pump 720 to function properly. The backup memory does not rely on the built-in power supply of the original insulin pump 720. Both the main memory and the backup memory are used to store user data. During insulin pump data migration, the user data stored in the main memory is typically migrated to the target insulin pump 710. However, if the original insulin pump 720 completely fails during insulin pump data migration for any reason (such as battery depletion or hardware failure), and if the target insulin pump 710 has passed security verification but the user data migration is interrupted, the original insulin pump 720 can power the backup storage area by setting the near-field communication chip, thereby migrating the user data stored in the backup memory to the target insulin pump 710. In this way, data can be resumed under the condition of old pump failure, avoiding data loss caused by migration interruption and improving the integrity and reliability of data migration.

[0122] This application also provides an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the above-described insulin pump data migration method. This electronic device can be any smart terminal, including tablet computers, in-vehicle computers, etc.

[0123] Please see Figure 8 , Figure 8 The hardware structure of an electronic device according to another embodiment is illustrated. The electronic device includes:

[0124] The processor 801 can be implemented using a general-purpose central processing unit (CPU), microprocessor, application specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this application.

[0125] The memory 802 can be implemented as a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 802 can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 802 and is called and executed by the processor 801 using the insulin pump data migration method of the embodiments of this application.

[0126] The 803 input / output interface is used to implement information input and output.

[0127] The communication interface 804 is used to enable communication and interaction between this device and other devices. Communication can be achieved through wired means (such as USB, Ethernet cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0128] Bus 805 transmits information between various components of the device (e.g., processor 801, memory 802, input / output interface 803, and communication interface 804);

[0129] The processor 801, memory 802, input / output interface 803, and communication interface 804 are connected to each other within the device via bus 805.

[0130] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described insulin pump data migration method.

[0131] Memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer-executable programs. Furthermore, memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, memory may optionally include memory remotely located relative to the processor, and these remote memories can be connected to the processor via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0132] The embodiments described in this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a limitation on the technical solutions provided by the embodiments of this application. As those skilled in the art will know, with the evolution of technology and the emergence of new application scenarios, the technical solutions provided by the embodiments of this application are also applicable to similar technical problems.

[0133] Those skilled in the art will understand that the technical solutions shown in the figures do not constitute a limitation on the embodiments of this application, and may include more or fewer steps than shown, or combine certain steps, or different steps.

[0134] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0135] Those skilled in the art will understand that all or some of the steps in the methods disclosed above, as well as the functional modules / units in the systems and devices, can be implemented as software, firmware, hardware, or suitable combinations thereof.

[0136] The terms “first,” “second,” “third,” “fourth,” etc. (if present) in the specification and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms “comprising” and “having,” and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0137] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0138] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of the units described above is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0139] The units described above as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0140] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0141] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes multiple instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing programs, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0142] The preferred embodiments of the present application have been described above with reference to the accompanying drawings, but this does not limit the scope of the claims of the present application. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and substance of the embodiments of the present application shall be within the scope of the claims of the present application.

Claims

1. A method for migrating insulin pump data, characterized in that, Applied to a primary insulin pump that stores user data, the method includes: The magnetic field characteristic information of the target insulin pump is obtained, and the magnetic field characteristics of the magnetic field characteristic information are verified to obtain magnetic field verification result information; wherein, the target insulin pump is equipped with a target identification magnet, and the magnetic field characteristic information is used to reflect the magnetic field characteristics of the target identification magnet; In response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, the system receives the target device identifier and verification code sent from the target insulin pump; wherein the verification code is generated by the target insulin pump. The target device identifier and the checksum are concatenated and encrypted using the first key to obtain an encrypted string; wherein the first key is pre-stored in the original insulin pump and the target insulin pump. The encrypted string is subjected to data integrity verification to obtain data verification result information; In response to the data verification result information satisfying the preset integrity verification pass condition, a first key calculation parameter is determined according to a first random number and a first key symbol, and the first key calculation parameter is sent to the target insulin pump; wherein, the first random number is generated by the original insulin pump; The second key calculation parameter is received from the target insulin pump; wherein the second key calculation parameter is determined by the target insulin pump based on the first key symbol and the second random number, and the second random number is generated by the target insulin pump. In the original insulin pump, a second key symbol is generated based on the first key calculation parameters and the second key calculation parameters; wherein, in the target insulin pump, a second key symbol is also generated based on the first key calculation parameters and the second key calculation parameters; The user data is encrypted using the first key and the second key to obtain encrypted user data. The encrypted user data is then transferred to the target insulin pump, so that the target insulin pump can decrypt the encrypted user data using the first key and the second key to obtain the user data.

2. The method according to claim 1, characterized in that, The user data includes health-related data and health-unrelated data. The step of encrypting the user data using the first key and the second key to obtain encrypted user data includes: In the original insulin pump, the health-related data is encrypted according to the second key to obtain encrypted health-related data; The encrypted health-related data and the health-unrelated data are encrypted using the first key symbol to obtain the encrypted user data.

3. The method according to claim 1, characterized in that, In the original insulin pump, generating a second key symbol based on the first key calculation parameters and the second key calculation parameters includes: The first key calculation parameter and the second key calculation parameter are XORed to obtain the target key calculation parameter. The target key generation algorithm is determined from a preset set of key generation algorithms based on the target key calculation parameters; wherein, the set of key generation algorithms includes multiple preset key generation algorithms; The target key calculation parameters are calculated according to the target key generation algorithm to generate the second key symbol.

4. A method for migrating insulin pump data, characterized in that, Applied to a target insulin pump, the target insulin pump being configured with a target identification magnet, the method includes: Generate a verification code; The pre-configured target device identifier and the verification code are sent to the original insulin pump, so that the original insulin pump performs concatenated encryption of the target device identifier and the verification code according to the first key to obtain an encrypted string, and performs data integrity verification on the encrypted string to obtain data verification result information; wherein, the first key is pre-stored in the original insulin pump and the target insulin pump; In response to the data verification result information satisfying the preset integrity verification pass condition, the second key calculation parameters are determined according to the first key symbol and the second random number; wherein, the second random number is generated by the target insulin pump; The second key calculation parameter is sent to the original insulin pump to determine the first key calculation parameter based on the first random number and the first key symbol in the original insulin pump, generate the second key symbol based on the first key calculation parameter and the second key calculation parameter, and encrypt the user data based on the first key symbol and the second key symbol to obtain encrypted user data; wherein, the first random number is generated by the original insulin pump, and the user data is stored in the original insulin pump; Receive the encrypted user data migrated from the original insulin pump and the first key calculation parameters; In the target insulin pump, a second key symbol is generated based on the first key calculation parameters and the second key calculation parameters, and the encrypted user data is decrypted based on the first key symbol and the second key symbol to obtain the user data; Before generating the verification code, the method further includes: Obtain the magnetic field feature information corresponding to the target identification magnet, and the magnetic field feature information is used to reflect the magnetic field characteristics of the target identification magnet; The magnetic field characteristic information is verified to obtain magnetic field verification result information. In response to the magnetic field verification result information satisfying the preset magnetic field verification pass conditions, the verification code is generated.

5. An insulin pump data migration system, characterized in that, The system includes: The target insulin pump includes: a target identification magnet; A primary insulin pump, communicatively connected to a target insulin pump, stores user data. The primary insulin pump includes: a first magnetic field sensor and a first control unit. The first magnetic field sensor acquires magnetic field characteristic information corresponding to the target identifier magnet. The first control unit is electrically connected to the first magnetic field sensor and is used to determine magnetic field verification result information according to the insulin pump data migration method as described in any one of claims 1 to 3 and the magnetic field characteristic information. The first control unit is further used to, in response to the magnetic field verification result information satisfying a preset magnetic field verification pass condition, acquire the target device identifier and verification code of the target insulin pump, and determine data verification result information according to the insulin pump data migration method as described in any one of claims 1 to 3, the target device identifier, and the verification code. The first control unit is also used to, in response to the data verification result information satisfying a preset integrity verification pass condition, determine data verification result information based on a first random number and a first key. The first control unit determines a first key calculation parameter and sends the first key calculation parameter to the target insulin pump; wherein the first random number is generated by the original insulin pump; receives a second key calculation parameter from the target insulin pump; wherein the second key calculation parameter is determined by the target insulin pump based on the first key and the second random number, and the second random number is generated by the target insulin pump; the first control unit is further configured to generate a second key in the original insulin pump based on the first key calculation parameter and the second key calculation parameter; wherein the second key is also generated in the target insulin pump based on the first key and the second key; the first control unit is further configured to encrypt the user data according to the first key and the second key to obtain encrypted user data, and migrate the encrypted user data to the target insulin pump, so that the target insulin pump can decrypt the encrypted user data according to the first key and the second key to obtain the user data.

6. The system according to claim 5, characterized in that, The original insulin pump also includes: a first indicator light; the target insulin pump also includes: a second indicator light and a second control unit, wherein the second control unit is communicatively connected to the second indicator light. The first control unit is communicatively connected to the second control unit and the first indicator light. The first control unit is also used to control the light emission color of the first indicator light to a first preset color in response to the magnetic field verification result information meeting the preset magnetic field verification pass conditions, and to send a first synchronization command to the second control unit so that the second control unit controls the light emission color of the second indicator light to also be the first preset color. The first control unit is further configured to, in response to the data verification result information satisfying the preset integrity verification pass condition, control the light emission color of the first indicator light to a second preset color, and send a second synchronization command to the second control unit so that the second control unit controls the light emission color of the second indicator light to also be the second preset color.

7. An electronic device, characterized in that, The electronic device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the insulin pump data migration method according to any one of claims 1 to 4.

8. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the insulin pump data migration method according to any one of claims 1 to 4.

Images